A firewall that uses the packet outgoing interface as the local interface for TCP connections.

The correct answer is A. TRUE. TRUE is correct because stateful firewalls and NAT devices bind outbound TCP connections to the IP address of the egress (outgoing) interface. When a packet exits through a specific interface, that interface's IP address becomes the local endpoint of the TCP connection…

Network Security

Question

A firewall that uses the packet outgoing interface as the local interface for TCP connections.

Options

ATRUE
BFALSE

How the community answered

(49 responses)

A
78% (38)
B
22% (11)

Explanation

TRUE is correct because stateful firewalls and NAT devices bind outbound TCP connections to the IP address of the egress (outgoing) interface. When a packet exits through a specific interface, that interface's IP address becomes the local endpoint of the TCP connection, ensuring remote hosts can route reply traffic back to the correct address.

FALSE is wrong because using any other interface's address (such as the ingress/incoming interface) would cause asymmetric routing - return packets would be sent to an address that doesn't match the path the firewall expects, breaking the TCP handshake and state tracking.

Memory tip: Think of it as mailing a letter - the return address you write must match the mailbox you're sending it from, not the one you received it at. The outgoing interface is your "mailbox," so its address is the local TCP address.

Topics

#Firewall TCP handling#Outgoing interface#Local interface#Connection state

Community Discussion

No community discussion yet for this question.

Full H12-821_V1.0 Practice